• Story premise / NOVA CITY 2097
• Garage 17 opening and starter prototype
• Maya / Adrian / Victor / Luna anchors
• PROJECT DRIVE ZERO conflict
• seven campaign chapters / five endings
• VIP fairness, social/crew, pets
• 25 characters / 100 main quests / world catalogs
• automated design validation
• Game Design Bible v0.2

• MQ001–MQ012 acceptance matrix
• Garage 17 / Foundry 9 graybox scope
• first-session UX
• starter handling target
• movement/interaction minimum
• legal + underground race proof definitions
• save/reconnect semantics
• accessibility baseline
• machine-readable slice catalog/schema

• Python contract oracle
• one account → one character
• vehicle ownership
• append-only build revisions
• quest reward idempotency
• MQ001–MQ100 ID + immediate-prerequisite sequence reference rule
• server-derived quest reward schedule reference rule
• quest completion reference API rejects caller-controlled money/xp/reputation
• race/build binding reference rule
• ordered checkpoint reference rule
• VIP separation reference rule
• starter deletion protection reference rule

• executive brief / talk track
• interactive offline demo
• runbook / commercial scope / Q&A
• Thai/English toggle
• client-demo CI / manual Pages
• explicit evidence language

• Unreal Engine 5.8 gameplay ADR
• Go + PostgreSQL + Redis service-plane ADR
• phase-gated deployment ADR

• complete documentation index
• product requirements
• API + durable data model docs through authoritative race v0.7
• multiplayer/networking authority spec
• threat-model baseline (production abuse testing still open)
• runtime security hardening v0.8 evidence boundary
• distributed abuse-controls v0.9 evidence boundary
• trusted-ingress identity v1.0 evidence boundary
• multi-replica HTTP load v1.1 CI evidence boundary
• race-integrity telemetry v1.2 evidence boundary
• observability metrics v1.3 source/unit evidence boundary
• PostgreSQL restore drill v1.4 CI evidence boundary
• PostgreSQL pool observability v1.5 source/unit evidence boundary
• Redis server observability v1.6 source/unit evidence boundary
• PostgreSQL server observability v1.7 source/integration evidence boundary
• integrated trust-boundary v1.8 PostgreSQL/Redis CI evidence boundary
• repeated multi-replica stability v1.9 CI evidence boundary
• Unreal dedicated-server observability v2.0 source/static-validation evidence boundary
• Unreal authority activity observability v2.1 source/static-validation evidence boundary
• Unreal displacement-envelope telemetry v2.2 source/static-validation evidence boundary
• Unreal rotation-envelope telemetry v2.3 source/static-validation evidence boundary
• PostgreSQL statement metrics v3.4 source/integration evidence boundary
• race-result hash reference parity v3.5 shared Python/Go evidence boundary
• entitlement fairness reference parity v3.6 shared Python/Go evidence boundary
• quest-sequence reference parity v3.7 shared Python/Go evidence boundary
• quest-reward reference parity v3.8 shared Python/Go evidence boundary
• quest-reward authority reference v3.9 caller-controlled reward removal evidence boundary
• race-lifecycle reference parity v4.0 shared Python/Go checkpoint/finish-order evidence boundary
• race-start reference parity v4.1 shared Python/Go Roadworthy/active-build binding evidence boundary
• race-operation replay reference parity v4.2 shared Python/Go payload-binding evidence boundary
• quest side-effects reference parity v4.3 shared Python/Go inventory/blueprint/Roadworthy evidence boundary
• rebuild-operation replay hardening v4.4 shared Python/Go owner/vehicle/revision/hash evidence boundary
• quest-operation scope hardening v4.5 authoritative character-scoped durable idempotency evidence boundary
• service-process restart/reconnect recovery v4.6 PostgreSQL-backed CI evidence boundary (node/HA/DR remain open)
• PostgreSQL physical-standby promotion recovery v4.7 CI evidence boundary (automatic failover/fencing/RPO/RTO/DR remain open)
• quest store replay binding v4.8 authoritative character + quest durable replay evidence boundary
• PostgreSQL transaction-boundary failover recovery v4.9 CI evidence boundary (automatic failover/fencing/zero-RPO/RPO-RTO/DR remain open)
• Redis replica-promotion limiter recovery v5.0 CI evidence boundary (automatic failover/Sentinel/Cluster/fencing/production HA remain open)
• Redis Sentinel master-discovery failover v5.1 CI evidence boundary (fencing/Cluster/deployment HA remain open)
• Redis Sentinel old-primary rejoin/read-only fencing v5.2 CI evidence boundary (asymmetric-partition split-brain/Cluster/deployment HA remain open)
• UE 5.8 retained build-evidence workflow boundary
• testing strategy + performance-budget targets
• observability/SLO target contract (deployment measurement still open)
• deployment + backup/restore/DR plans (production verification still open)
• incident-response runbook (exercise still open)
• accessibility + localization baselines
• content/quest/world/vehicle/faction/crew/companion authoring specs
• economy/fairness + moderation + privacy + live-ops policies
• governance + support + maintainers
• release-readiness + asset/IP + brand guidance
• documentation completeness + relative-link validator

• Unreal .uproject baseline
• Unreal Game / Editor / dedicated Server targets
• server-authoritative replicated prototype pawn
• manual self-hosted UE build workflow
• UE 5.8 source-tree and installed-build Linux helper
• retained UE Client/Server build-evidence workflow contract with engine metadata, logs and checksums
• successful real UE 5.8 Client build evidence artifact
• successful real UE 5.8 dedicated Server build evidence artifact
• successful retained UE 5.8 Client/Server package/cook evidence
• Go 1.27 service binary
• PostgreSQL durable schema
• local Docker Compose PostgreSQL + Redis + API
• hashed resume/session credentials
• durable one-character bootstrap
• durable starter vehicle + immutable revisions
• idempotent quest/build operations
• quest operation durable keys are scoped to authoritative character identity before PostgreSQL persistence
• PostgreSQL quest replay lookup revalidates authoritative character + quest binding before accepting idempotent replay
• MQ001–MQ100 prerequisite enforcement
• shared Python/Go MQ001–MQ100 quest ID + prerequisite sequence parity vectors
• shared Python/Go MQ reward schedule parity vectors
• shared Python/Go MQ004/MQ005/MQ009/MQ012 quest side-effect parity vectors
• Python reference quest completion derives rewards instead of accepting caller-controlled amounts
• MQ012 Roadworthy transition
• Go unit tests
• PostgreSQL integration tests
• Redis distributed-limiter integration test
• concurrent two-replica HTTP integration test sharing one Redis limiter budget
• repeated two-replica HTTP stability test across 12 fresh client budgets / 768 requests
• integrated PostgreSQL + Redis trust-boundary abuse-path test
• Redis 8 replica-promotion integration evidence preserves exhausted limiter budget and refill semantics after explicit promotion
• Redis 8 Sentinel integration evidence automatically rediscovers promoted limiter authority without application endpoint reconfiguration
• Redis 8 Sentinel rejoin evidence demotes the restarted old primary to a connected read-only replica while application discovery remains on the promoted master
• credential-safe race-integrity/auth rejection telemetry middleware
• bounded HTTP request/status-class/latency/in-flight metrics
• separate metrics listener with loopback-only Compose publication
• metrics unit coverage for label cardinality and secret/dynamic-ID non-disclosure
• bounded PostgreSQL pgx pool connection/acquire metrics
• PostgreSQL pool metrics unit coverage and credential/URL non-disclosure assertions
• bounded Redis INFO server metrics with short probe deadlines
• Redis server metrics unit/TCP RESP coverage and error/address non-disclosure assertions
• bounded current-database PostgreSQL server metrics
• PostgreSQL server metrics unit/error non-disclosure coverage
• PostgreSQL 17 server metrics integration coverage
• Unreal dedicated-server aggregate telemetry source for sessions, tick timing, input clamps and ticket redemption outcomes
• Unreal authority movement/identity-gate/collision/net-update aggregate telemetry source
• Unreal authority displacement envelope derived from server max speed + bounded slack
• Unreal displacement baseline reset on durable identity bind and updated only after authoritative movement
• Unreal authority rotation envelope derived from server turn rate + bounded yaw slack
• Unreal rotation baseline reset on durable identity bind, wrap-safe delta checked before movement, and updated after authoritative rotation
• Unreal dedicated-server telemetry static validation enforcing numeric-only bounded fields, hook placement and no credential/dynamic identifiers
• PostgreSQL 17 isolated pg_dump/pg_restore CI drill
• restore assertions for account/progression/vehicle/build/inventory/blueprint/quest/race state and operation IDs
• restore-time replay of all canonical migrations
• retained CI restore report + dump artifact
• committed go.mod/go.sum module lock
• one-time gameplay-ticket persistence and atomic redemption
• server-only shared-key internal redemption endpoint
• HTTP/PostgreSQL reconnect + ticket E2E
• PostgreSQL-backed Go service-process restart/reconnect preserves durable identity, progression and quest replay semantics
• PostgreSQL 17 physical standby promotion CI evidence preserves durable identity/progression + quest replay semantics after WAL catch-up
• PostgreSQL 17 transaction-boundary failover CI evidence proves uncommitted MQ001 completion/reward rollback and exactly-once retry after promotion
• Unreal session/resume subsystem source
• dedicated-server ticket redemption source
• authority-only durable VehicleID/build/parts/Roadworthy binding
• PostgreSQL inventory + blueprint persistence
• canonical vehicle-part catalog validation in Go runtime
• MQ004/MQ009 idempotent item grants
• MQ005 durable starter-rebuild blueprint unlock
• atomic inventory consume/return + immutable rebuild revision
• build operation replay bound to authoritative owner + vehicle + expected/result revision + exact validation hash
• shared Python/Go rebuild operation-id replay owner/vehicle/revision/hash parity vectors
• reconnect persistence for inventory/blueprints/rebuild state
• Unreal snapshot source parses inventory/blueprints
• PostgreSQL race instance/checkpoint/result persistence
• race start bound to owned Roadworthy vehicle + exact active build revision/hash
• race lifecycle endpoints restricted to dedicated-server shared-key boundary
• ordered checkpoint cursor + monotonic elapsed-time enforcement
• idempotent race start/checkpoint/finish operation semantics
• deterministic final result hash bound to authoritative build evidence
• shared Python/Go parity vectors verify deterministic race-result hash contract
• shared Python/Go parity vectors verify checkpoint cursor, monotonic elapsed and finish-order contract
• shared Python/Go parity vectors verify race-start Roadworthy + active build revision/hash binding contract
• shared Python/Go parity vectors verify race operation-id replay payload binding for start/checkpoint/finish
• bounded per-process token-bucket limiter wrapped around service HTTP API
• limiter covers bootstrap/state/tickets/quests/builds/internal race mutations
• raw bearer/session credentials excluded from limiter keys
• limiter bucket cardinality bounded with stale/oldest eviction
• 429 + Retry-After contract unit tested
• Redis-coordinated token bucket shares abuse budget across limiter instances
• Redis-unavailable path retains bounded local limiting rather than unbounded fail-open
• rate-limit rejection/fallback security events exclude raw credentials
• trusted-proxy/ingress client identity policy implemented and unit exercised
• direct/untrusted peers cannot spoof X-Forwarded-For identity
• multi-hop forwarding chain selects first untrusted hop from the right
• invalid proxy CIDRs fail startup; malformed XFF falls back to socket peer
• two HTTP replicas under concurrent CI traffic consume exactly one Redis-coordinated burst budget
• repeated fresh-client cycles preserve exact Redis-coordinated budget and Retry-After semantics
• integrated middleware rejects forged sessions, wrong game-server keys and one-time ticket replay
• race rejection/auth telemetry hashes race-instance and peer identifiers before logging
• deployed ingress sanitization/network-isolation evidence
• deployment-scale distributed limiter load evidence
• long-duration soak evidence
• PostgreSQL pool connection/acquire metrics source + unit evidence
• PostgreSQL current-database server metrics source + integration evidence
• PostgreSQL query-level/external exporter metrics source + PostgreSQL 17 CI evidence (deployment verification still open)
• Redis server metrics source + unit evidence
• Unreal server tick/session/input-clamp/ticket-redemption aggregate telemetry source + static validation
• Unreal authority movement/identity-gate/collision/net-update aggregate telemetry source + static validation
• Unreal authority displacement-envelope source + static-placement evidence
• Unreal authority rotation-envelope source + static-placement evidence
• Unreal replication-rate/bytes, live race-validation, final-physics authority-correction and deployed scrape evidence
• full reference-oracle parity in Go
• live packaged Unreal ↔ Go integration evidence
• live packaged Unreal ↔ Go race lifecycle evidence

• Full dialogue/script MQ001–MQ100
• Side-quest narratives
• Cinematic/storyboard list
• Environment storytelling assets
• Voice/localization guide
• Rating/sensitivity review

• selected client/server ADRs
• Unreal source project baseline
• Garage 17 environment playable
• first vehicle rebuild playable (durable service contract implemented; Unreal interaction/evidence still open)
• First Ignition end-to-end in Unreal
• Foundry 9 traversal/jobs
• legal + underground race playable (service-plane race authority exists; live Unreal gameplay/evidence still open)
• Maya relationship visible
• Luna utility playable
• durable Unreal save/reconnect verified

• Threat model complete and exercised
• Threat-model baseline documented
• Client cannot self-assert durable snapshot in v0.5 source contract
• One-time ticket replay rejected by service E2E
• Durable race result/build identity cannot be submitted directly by player-facing endpoints
• Ordered/monotonic race checkpoint acceptance enforced in PostgreSQL runtime
• Per-process HTTP abuse rate limiting implemented and unit tested
• Credential-derived rate-limit identities are hashed before bucket storage
• Health probes are exempt from player mutation rate limits
• Redis coordination shares limiter state across independent instances
• Rate-limit rejection/fallback security log events
• Trusted ingress/proxy identity source handling unit tested
• Multi-replica HTTP CI load evidence for distributed limiter
• Repeated multi-replica Redis limiter stability CI evidence
• Integrated PostgreSQL + Redis trust-boundary abuse-path CI evidence
• Redis explicit replica-promotion limiter continuity CI evidence
• Redis Sentinel automatic master-discovery failover continuity CI evidence
• Redis Sentinel old-primary rejoin/read-only demotion CI evidence
• Dedicated-server auth rejection telemetry/correlation baseline
• Authoritative race rejection telemetry baseline
• Unreal authoritative input-clamp aggregate telemetry source baseline
• Unreal durable-identity gate and collision-block aggregate telemetry source baseline
• Unreal source-level impossible-displacement envelope telemetry baseline
• Unreal source-level impossible-rotation envelope telemetry baseline
• Deployed proxy header sanitization + direct-bypass prevention verified
• Client trust boundaries tested over live Unreal↔Go transport
• Deployment-scale HTTP load evidence for distributed limiter
• Physics-derived cheat telemetry verified from live Unreal dedicated-server samples
• Ranked impossible-state detection / sanctions policy
• Admin/live-ops audit trail
• Abuse/moderation runtime

• Go HTTP metrics source/unit instrumentation baseline
• PostgreSQL pool connection/acquire metrics source/unit baseline
• Redis server metrics source/unit baseline
• PostgreSQL current-database server metrics source/integration baseline
• PostgreSQL query-level/external exporter metrics source + PostgreSQL 17 CI evidence
• Repeated two-replica Redis limiter CI stability evidence
• Redis 8 explicit replica-promotion limiter continuity CI evidence
• Redis 8 Sentinel automatic master-discovery failover continuity CI evidence
• Redis 8 Sentinel old-primary rejoin/read-only demotion CI evidence
• Unreal dedicated-server aggregate tick/session/input/ticket telemetry source baseline
• Unreal authority movement/gating/collision/net-update telemetry source baseline
• Unreal source-level authority displacement-envelope telemetry baseline
• Unreal source-level authority rotation-envelope telemetry source baseline
• Unreal replication-rate/bytes and deployed scrape/dashboard evidence
• Deployed metrics scrape/dashboard evidence
• Load test executed against agreed deployment target
• Long-duration soak test
• PostgreSQL 17 CI backup archive verification
• Isolated PostgreSQL CI restore drill
• Representative durable-state + idempotency validation after restore
• Go service-process restart/reconnect CI evidence against PostgreSQL durable state
• Isolated PostgreSQL 17 physical-standby promotion + post-promotion quest replay CI evidence
• Isolated PostgreSQL 17 primary-loss-during-uncommitted-MQ001 + promoted retry CI evidence
• Redis Sentinel automatic primary discovery/promotion CI evidence for limiter coordination
• Redis Sentinel old-primary rejoin is demoted to a connected read-only replica after promotion in isolated CI
• Redis asymmetric-partition split-brain prevention/Cluster/deployment-HA evidence
• Production backup verification / off-host retention evidence
• Production restore drill against agreed deployment target
• RPO/RTO accepted and demonstrated
• process/node reconnect recovery
• duplicate-reward prevention under failover
• content rollback

• Stack-specific Unreal + Go CI all green
• Go HTTP/PostgreSQL runtime integration/e2e
• Redis shared limiter integration evidence
• Trusted-ingress identity source unit evidence
• Concurrent two-replica HTTP/Redis limiter CI evidence
• Repeated two-replica Redis limiter stability CI evidence
• Integrated PostgreSQL + Redis trust-boundary abuse-path CI evidence
• Redis 8 explicit replica-promotion limiter continuity CI evidence
• Redis 8 Sentinel automatic master-discovery failover continuity CI evidence
• Redis 8 Sentinel old-primary rejoin/read-only demotion CI evidence
• Race-integrity/auth telemetry source + unit evidence
• Go HTTP metrics source + unit evidence
• PostgreSQL pool metrics source + unit evidence
• Redis server metrics source + unit evidence
• PostgreSQL server metrics source + PostgreSQL 17 integration evidence
• PostgreSQL statement metrics + external exporter PostgreSQL 17 CI evidence
• Unreal dedicated-server observability source/static-validation evidence
• Unreal authority activity observability source/static-validation evidence
• Unreal authority displacement-envelope source/static-validation evidence
• Unreal authority rotation-envelope source/static-validation evidence
• Isolated PostgreSQL 17 backup/restore CI evidence
• PostgreSQL-backed Go service-process restart/reconnect recovery CI evidence
• Isolated PostgreSQL 17 physical-standby promotion recovery CI evidence
• Isolated PostgreSQL 17 transaction-boundary failover retry CI evidence
• PostgreSQL quest replay authoritative-character binding integration evidence
• shared Python/Go deterministic race-result hash parity evidence
• shared Python/Go race checkpoint/finish lifecycle-order parity evidence
• shared Python/Go race-start eligibility/build-binding parity evidence
• shared Python/Go race operation-id replay payload-binding parity evidence
• shared Python/Go rebuild operation-id replay owner/vehicle/revision/hash payload-binding parity evidence
• authoritative-character quest operation-key scoping source/unit/API evidence
• shared Python/Go entitlement capacity + starter-deletion parity evidence
• shared Python/Go MQ001–MQ100 quest ID + prerequisite sequence parity evidence
• shared Python/Go MQ reward schedule parity evidence
• shared Python/Go MQ004/MQ005/MQ009/MQ012 quest side-effect parity evidence
• Python reference quest completion rejects caller-controlled reward amounts
• UE source/installed-build tooling tests
• UE retained build-evidence workflow contract
• Successful real UE 5.8 Client/Server build evidence
• Successful real UE 5.8 Client/Server package/cook evidence
• Deployed ingress trust-boundary evidence
• Deployed metrics/SLO evidence
• Live Unreal/Go packaged integration/e2e
• Live Unreal/Go race lifecycle e2e
• Security scans pass for complete runtime surface
• Distributed abuse controls verified under deployment-scale multi-replica HTTP load
• Performance budgets measured/passed
• Accessibility review
• Privacy/data-retention review
• Production deployment evidence
• Production DR evidence
• Go/no-go approval

Unchecked production claims must not be represented as complete without evidence.